(valid from 5/25/2018)
1. Introductory provisions
Data protection is a matter of trust, and your trust is very important to us. In order for users to feel safe when visiting our website, we strictly comply with the provisions of generally applicable law when processing personal data. At this point, we would like to inform you about our data processing principles. The following data protection declaration informs about what user data is collected via our website and which of this data is processed, and to whom to contact in related matters
2. General information
Personal data is any information relating to an identified or identifiable natural person. These include, for example, name and surname, telephone number, address and all basic data that the user provided to us during registration and creating a customer account, as well as data regarding the user's personal preferences.
The processing of personal data includes all activities that are taken in connection with the use of personal data, for example: collecting, recording, storing, viewing, using. The administrator of users' data, and therefore the entity responsible for the processing of personal data, is the company Łukasz Marek Jemioł (hereinafter: Łukasz Jemioł). Contact with the Data Administrator is possible at the following contact details:
a. By traditional mail at the address: Łukasz Jemioł, based at ul. Circular 11A lok. 71, 00-368 Warsaw
b. By e-mail: email@example.com
The administrator informs that the processing of user data takes place on the basis of and in accordance with the provisions of generally applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in connection with processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter referred to as the "GDPR". The purpose, basis and scope of the processing of personal data, the user depends on the type of activities carried out by the Administrator. We process user data for the following purposes: execution of an order placed by the customer, customer service, user account management, marketing activities and newsletter dispatch.
3. Purposes, grounds and scope of data processing.
In order to provide full and transparent information on the processing of user data, below we indicate for what purposes, to what extent and on what grounds we process the personal data of users depending on the activity undertaken.
Fulfillment and service of orders.
We process your data as part of the purchase process, including any subsequent complaint procedures, in order to provide our services through our website. We need your e-mail address so that we can confirm receipt of your order and its dispatch, and to communicate with you in general. In order to properly execute and service the order, including the organization of delivery by the method chosen by the customer, the Administrator processes the user's data indicated in the order form in the following scope:
• e-mail address
• home address
• mobile number
In connection with the implementation and service of the order, we process customer data for the following purposes and on the basis of:
• in order to perform the sales contract to which the data subject is a party pursuant to Art. 6 sec. 1 lit. b) GDPR;
• in order to fulfill the legal obligations incumbent on the Administrator in the field of tax law, financial settlements and consumer rights pursuant to art. 6 sec. 1 lit. c) GDPR in connection with, inter alia, Act of April 23, 1964 Civil Code, Act of September 29, 1994 on accounting, Act of August 29, 1997 Tax Ordinance, Act of May 30, 2014 on consumer rights; & lt ;
• in order to implement the legitimate interests pursued by the Administrator in the field of communication with the user and possible determination, investigation and defense of claims pursuant to art. 6 sec. 1 lit. f) GDPR.
The customer's personal data will be processed for the period necessary to achieve the above-mentioned purposes, and therefore for the period necessary to perform the order, for the period required by law and until the deadlines for seeking possible claims expire, i.e. for a period of 5 years from the year following the year termination of the contract. Providing personal data by the customer is voluntary, but necessary to conclude the contract and perform the order. Failure to provide personal data by the user makes it impossible to make a purchase.
For each customer who registers on our website using the "Create account" function, we set up a customer account, ie a password-protected direct access to the user's basic data stored with us. Here, the user can view, among other things, his completed, ongoing and recently sent orders or manage his personal data and the newsletter. In order to create, maintain and operate a user account, we process the following personal data of the customer:
• e-mail address
• home address
• mobile phone number
• order history
The basis for the processing of personal data entered in the user account is the performance of a contract to which the data subject is a party pursuant to art. 6 sec. 1 lit. b) GDPR. In terms of establishing, investigating or defending against possible claims, the basis for data processing is the Controller's legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR. Personal data will be processed until the purpose for which it was collected ceases to exist, and therefore for the duration of the user's account and after this period until the expiry of the limitation period for any claims. Providing data by the user is voluntary, but necessary to create a user account. Failure to provide the data results in the inability to use the user account management service.
Contact at user request
There is a contact form on our website through which the user can contact us. The basis for the processing of data sent via the contact form is the legitimate interest of the Administrator in the form of ensuring proper customer service and contact with the user in accordance with art. 6 sec. 1 lit. f) GDPR. Depending on the content of the message sent, further data processing may also be based on other grounds, e.g. in the event that the user contacts us in order to exercise his rights, the basis for processing will be the legal obligation incumbent on the Administrator in accordance with art. 6 sec. 1 lit. c) GDPR. Personal data will be processed until the purpose for which they were collected ceases to exist. Providing data by the user is voluntary, but necessary to send a message via the contact form.
In order to enable customers to stay up to date with our current offers and promotions, we offer users the option of using our newsletter service. We use the e-mail address provided by the user to send the newsletter . The confirmation of the user is required, which consists in expressing by him, as the owner of the e-mail address, consent to receive the newsletter . If the user would like to unsubscribe from the newsletter , he may at any time cancel his consent without incurring costs other than the costs of providing information according to the basic tariff. For this purpose, a notification in text form to the contact details mentioned in point 1 (e.g. e-mail, letter) is sufficient. Of course, you will find a link to unsubscribe from the newsletter in every newsletter . Personal data in the form of an e-mail address (and any information contained in the name, e-mail address, e.g. name and surname) are processed in order to provide the service based on the legitimate interest of the Administrator in the form of marketing activities in accordance with art. 6 sec. 1 lit. f) GDPR. Personal data will be processed by us until the user effectively withdraws his consent. Use of user data for advertising purposes We also offer the option of receiving marketing messages from us via SMS messages sent to the telephone number provided by the user. In this case, customers' personal data is processed for promotional purposes, consisting in sending marketing information. For the above purpose, we process the customer's personal data in the field of first name, last name and the telephone number provided. The basis for data processing is a legitimate legal interest in the form of marketing activities by the Administrator in accordance with art. 6 sec. lit. f) GDPR. We also use your data for the following purposes: to continuously optimize your purchases as part of a customer-friendly and personalized offer, and to recommend products or services that may be of interest to you. For this purpose, we use the obtained information, for example, confirmation of receipt and reading of e-mails, information about the end device owned by the user, Internet connection, operating system and platform, date and time of the visit to the website or products viewed, as well as information that we obtain from you (including automatically provided or generated information). In addition, we also use order history. This means that the data collected by the Administrator may be profiled in certain cases, i.e. used to determine the preferences and interests of the user, in order to be able to personalize and adapt the message directed to the customer. The basis for the processing of the above data is the Administrator's legitimate legal interest in order to best adapt its offer to customers in accordance with art. 6 sec. 1 lit. f) GDPR. Personal data used for the above purposes will be processed until the purpose for which they were collected ceases to exist or until a justified objection to the processing is raised.
4. Rights of data subjects
We respect the privacy and rights of users in relation to the processing of their personal data, and we value their awareness in this regard. Therefore, we present the data protection rights of data subjects below. The User is entitled to obtain from the Administrator confirmation as to whether he processes his personal data, and if so, he is entitled to access them and receive information regarding this processing. In the event of the above-mentioned request, the user will be entitled to receive a copy of the data processed by the Administrator. The User is entitled to request the correction of his / her incorrect data and to supplement incomplete data. In the event of the above-mentioned request, we will update your personal data in accordance with your instructions. The User is entitled to request the deletion of personal data in the following cases:
• personal data are no longer necessary for the purposes for which they were processed;
• withdraw consent to the processing of personal data, if it was the basis for processing;
• the user has objected to the processing and there are no overriding legitimate grounds for processing;
• personal data was processed unlawfully;
• there is a legal obligation to delete data.
In the event of the above request, we will delete your personal data and stop processing it, unless there are legal grounds for further processing. The User is entitled to request a restriction of processing in the following cases:
• in the event of questioning the correctness of personal data - for a period allowing for the verification of the compliance of such data;
• the processing is unlawful and the user opposes the erasure of personal data, requesting instead to limit their use;
• personal data are no longer needed for the purposes of processing, but they are needed by the user to establish, assert or defend claims;
• if the user objects to the processing - until the Administrator verifies the legitimacy of the objection.
In the event of the above request, we will mark the restricted personal data in order to no longer process it. In order to exercise this right, the user should specify the reason for the request and the scope of the data whose processing is to be limited. The user is entitled to request the transfer of data if the processing takes place on the basis of consent or for the performance of a contract concluded with the user or the processing is carried out in an automated manner. In order to fulfill this request, the user is entitled to receive his personal data in a machine-readable format, i.e. on an IT medium. The User may also request that his personal data be sent by the Administrator directly to another administrator, if technically possible. The User has the right to object to the processing at any time for reasons related to his particular situation, if the processing takes place on the basis of the Controller's legitimate interest (Article 6 (1) (f) of the GDPR) or the performance of a task carried out in the public interest (Article 6 (1) (f) of the GDPR). 1 letter e of the GDPR). In the event of the above-mentioned request, we will stop processing your data, unless we are able to demonstrate the superiority of our legal interest in processing over your interests, rights and freedoms. If you object to the processing for direct marketing purposes, we will stop processing your personal data. The user also has the right not to be subject to a decision based solely on automated processing, including profiling. In order to exercise the above-mentioned rights, simply contact the traditional mail at Łukasz Jemioł, ul. Circular 11A lok. 71, 00-368 Warsaw, via the e-mail address firstname.lastname@example.org, or via the contact form available on our website. We will respond to your request as soon as possible and in any case no later than one month after receiving your request.
5. Disclosure of data to third parties
Users' personal data may be transferred to third parties only if it is permitted by law. Personal data may be transferred to entities cooperating with the Administrator, in particular to IT system suppliers, e-mail suppliers, companies providing hosting services, suppliers of marketing tools, courier companies, and a law firm. Personal data may be transferred to service providers used by the Administrator (e.g. IT system providers) on the basis of appropriate entrustment agreements. Personal data may also be made available to public authorities or entities authorized to obtain data on the basis of applicable law, e.g. courts, tax offices, law enforcement authorities or state institutions. Users 'personal data may be transferred outside the European Economic Area in order to use the services of foreign entities offering tools used by the Administrator in the event that an adequate level of protection of users' personal data is guaranteed.
6. Cookies ( Cookies )
What are cookies?
What cookies does Łukasz Jemioł use?
What data is stored in cookies?
pseudonymised data is stored in the cookies used by Łukasz Jemioł . When the cookie is activated, it is assigned an identification number without assigning the user's personal data to this identification number. The first and last name, IP address or similar data of the user that allows a cookie to be directly assigned to the user are not saved in the cookie. Based on the cookie technology, we only obtain pseudonymised information, for example about which pages of our store the user has visited, which products have been viewed, etc.
Are third party cookies also used ?
Łukasz Jemioł cooperates with some advertising companies that help in creating websites so that they are more attractive to users. Therefore, when visiting websites, cookies from partner companies are also saved on the hard drive of the user's computer. These are temporary / permanent cookies that are automatically deleted after a certain period of time. Temporary and permanent cookies (storage period from 14 days to 10 years) are saved on the hard drive of the user's computer, and after a specified period of time they are automatically deleted. Also, cookies of partner companies contain only pseudonymised data , usually anonymous data. This is, for example, information about what products the user has viewed, or made a purchase, what products he was looking for, etc. Some of our partners also collect information about which pages the user has visited before or what products he / she was interested in, in order to ultimately display advertisements that will best suit you. his interests.
Our websites use so-called retargeting technology . We use this technology to be able to offer users a more attractive Internet offer. It allows you to present users who are interested in our store and our products, appropriate advertising on the websites of our partners. We are convinced that the display of personalized, interest-related advertising is usually more attractive to the user than advertising that does not have such an individual relationship. The display of these advertising materials on the websites of our partners is based on cookie technology and an analysis of previous user behavior. This form of advertising is carried out completely anonymously. When using our website, cookies are used to collect, save and use data about user behavior. In addition, user data contained in cookies is stored after the end of the browser session and, for example, used during the next visit to the website.
How can you prevent the saving of cookies?